#%PAM-1.0
auth required pam_tally.so onerr=fail deny=10 per_user unlock_time=600
account required pam_tally.so
auth       include      system-auth
account    required     pam_nologin.so
account    include      system-auth
password   include      system-auth
session    optional     pam_keyinit.so force revoke
session    include      system-auth
session    required     pam_loginuid.so
